{"id":"CVE-2026-80335","title":"Out-of-bounds Write in Bootloader","summary":"Memory Corruption when processing firmware update data in Download mode due to a missing bounds check.","severity":"high","cvss":8.4,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-787"],"vendor":"Unisoc (Shanghai) Technologies Co., Ltd.","product":"Bootloader","affected":["Bootloader SC9863A","Bootloader SC9832E","Bootloader SC7731E","Bootloader T310","Bootloader T610","Bootloader T618","Bootloader T7200","Bootloader T7225","Bootloader T7250","Bootloader T7255","Bootloader T7280","Bootloader T8100","Bootloader T9100","Bootloader T8200","Bootloader T7300","Bootloader T8300"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-04T14:53:39.348855Z"},"published":"2026-11-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T07:01:13.075Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80335","references":[{"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937"}],"tags":["cve.org"],"epss":0.00266,"epssPercentile":0.18661,"ingestedAt":"2026-11-05T21:36:00.796Z","slug":"CVE-2026-80335","body":"## Overview\n\nMemory Corruption when processing firmware update data in Download mode due to a missing bounds check.\n\n## Affected\n\n- `Bootloader SC9863A`\n- `Bootloader SC9832E`\n- `Bootloader SC7731E`\n- `Bootloader T310`\n- `Bootloader T610`\n- `Bootloader T618`\n- `Bootloader T7200`\n- `Bootloader T7225`\n- `Bootloader T7250`\n- `Bootloader T7255`\n- `Bootloader T7280`\n- `Bootloader T8100`\n- `Bootloader T9100`\n- `Bootloader T8200`\n- `Bootloader T7300`\n- `Bootloader T8300`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":46.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}